Another thing unmentioned here is the impracticality of contacting the existing webpage owners. And figuring out who knows what. Yet it’s not the web owners fault
It's a very finance culture approach, though, where the bounds of what's in and out are tested constantly by what (knowledgeable, ideally) participants, compliance departments, and regulators are willing to tolerate. Many banks were highly criticized after the financial crisis for selling "knowingly toxic" CDO/CLOs but on the other side of the trade were highly sophisticated buyers who wanted those securities.